SlowMist's Yu Xian Reports 1,184 Malicious ClawHub Skills Can Steal SSH Keys and Crypto Wallets

SlowMist's Yu Xian said on X on Feb. 20 that 1,184 malicious skills on OpenClaw's ClawHub can steal SSH keys and crypto wallets, PANews reports. One attacker uploaded 677 packages, and Yu warned that text can be executable. He cited a $1.78 million Moonwell hack as an example.